VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20251222

[Page version: 20260112 15:28:56]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.54 1.55 1.55 T:aes128gcmv1 1.66 1.68 1.69 aes256gcmv1 6.67 6.76 6.78 ascon128av12 9.33 9.34 9.43 ascon128v12 9.37 9.38 9.39 ascon80pqv12 11.42 11.44 11.45 ascon128abi32v12 17.22 17.23 17.23 ascon128bi32v12 17.52 17.68 18.40 T:xoodyakround3 21.44 21.76 21.79 T:schwaemm256128v2 25.50 25.77 25.78 T:schwaemm256256v2 27.22 27.54 27.67 T:grain128aeadv2 28.48 28.50 28.53 T:schwaemm192192v2 29.76 29.78 29.81 T:schwaemm128128v2 35.21 35.29 35.33 romulusn 36.23 36.40 36.50 T:isapa128v20 36.79 36.87 37.05 T:isapa128av20 40.35 40.72 41.16 T:giftcofb128v1 57.07 57.31 57.38 romulusm 62.17 62.22 62.25 T:tinyjambu128v2 66.67 66.88 67.27 T:isapk128av20 69.45 69.52 69.56 T:tinyjambu192v2 76.70 76.70 76.72 T:tinyjambu256v2 88.06 88.23 88.43 T:isapk128v20 115.60 115.61 115.97 romulust 164.47 165.11 165.82 T:isapxv20 255.29 255.53 255.86 T:elephant200v2 6832.43 6836.80 6838.34 T:elephant176v2 7652.24 7653.05 7654.41 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.69 1.70 1.70 T:aes128gcmv1 1.76 1.77 1.79 aes256gcmv1 6.66 6.67 6.67 ascon128av12 9.35 9.37 9.39 ascon80pqv12 9.37 9.39 9.41 ascon128v12 11.42 11.44 11.45 ascon128abi32v12 17.27 17.29 17.29 ascon128bi32v12 17.40 17.47 17.49 T:xoodyakround3 21.81 21.82 21.83 T:schwaemm256128v2 25.49 25.66 25.84 T:schwaemm256256v2 25.76 26.72 27.33 T:grain128aeadv2 28.63 28.99 29.06 T:schwaemm192192v2 29.91 30.01 30.03 T:schwaemm128128v2 35.36 35.53 35.54 romulusn 36.36 36.39 36.44 T:isapa128v20 36.69 36.70 36.94 T:isapa128av20 40.83 40.89 41.07 T:giftcofb128v1 57.19 57.69 57.71 romulusm 62.22 62.25 62.27 T:tinyjambu128v2 66.79 66.87 67.43 T:isapk128av20 69.31 69.34 69.35 T:tinyjambu192v2 76.79 76.80 76.81 T:tinyjambu256v2 88.09 88.35 88.69 T:isapk128v20 115.57 115.59 115.62 romulust 163.22 164.81 165.28 T:isapxv20 254.93 255.38 255.96 T:elephant200v2 6833.23 6837.62 6848.04 T:elephant176v2 7650.92 7652.91 7655.31 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.68 1.69 1.70 T:aes128gcmv1 1.76 1.77 1.78 aes256gcmv1 6.66 6.68 6.69 ascon128av12 9.32 9.37 9.40 ascon80pqv12 9.37 9.40 9.41 ascon128v12 11.43 11.44 11.44 ascon128abi32v12 17.12 17.12 17.14 ascon128bi32v12 17.54 17.56 17.58 T:xoodyakround3 18.19 18.19 18.24 T:isapa128v20 21.80 21.82 21.82 T:schwaemm256128v2 24.35 24.37 24.53 T:isapa128av20 25.48 25.58 25.67 T:schwaemm256256v2 25.55 26.99 27.31 T:grain128aeadv2 28.64 28.66 29.04 T:schwaemm192192v2 29.81 29.82 29.96 T:schwaemm128128v2 35.36 35.40 35.58 romulusn 38.86 38.87 38.88 romulust 40.78 40.99 41.10 T:giftcofb128v1 44.00 44.07 44.12 T:isapk128av20 54.78 54.82 54.93 T:isapk128v20 57.23 57.32 57.69 romulusm 62.19 62.21 62.29 T:tinyjambu128v2 69.32 69.32 69.33 T:tinyjambu192v2 76.78 76.81 76.82 T:tinyjambu256v2 98.22 98.33 98.57 T:isapxv20 255.26 255.47 255.71 T:elephant200v2 6833.53 6835.16 6836.70 T:elephant176v2 7652.30 7653.85 7656.10 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.02 1.02 1.03 T:aes128gcmv1 1.10 1.11 1.11 aes256gcmv1 6.58 6.58 6.61 ascon128av12 9.30 9.31 9.32 ascon80pqv12 9.30 9.31 9.34 ascon128v12 11.06 11.08 11.11 ascon128abi32v12 13.77 13.82 14.24 T:xoodyakround3 16.88 16.89 16.90 ascon128bi32v12 21.47 21.61 21.62 T:schwaemm256128v2 25.61 25.71 25.85 T:schwaemm256256v2 27.32 27.33 27.38 T:isapa128v20 27.27 27.33 27.41 T:grain128aeadv2 28.41 28.48 28.63 T:schwaemm192192v2 28.60 28.65 28.72 romulusn 29.65 29.83 29.87 T:schwaemm128128v2 30.76 30.84 30.86 T:isapa128av20 39.40 39.66 39.83 romulusm 40.33 40.35 41.03 T:giftcofb128v1 51.13 51.17 51.18 T:tinyjambu128v2 54.81 54.85 54.86 T:tinyjambu192v2 55.42 55.56 55.96 T:isapk128av20 58.44 58.47 58.54 T:tinyjambu256v2 71.46 71.56 71.60 T:isapk128v20 77.21 77.23 77.28 romulust 131.28 131.77 132.12 T:isapxv20 190.67 191.40 191.75 T:elephant200v2 5102.45 5103.21 5123.86 T:elephant176v2 5736.62 5737.02 5737.39 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.15 1.15 1.16 aes256gcmv1 6.52 6.53 6.54 ascon128av12 9.30 9.30 9.30 ascon128v12 9.30 9.30 9.30 ascon80pqv12 11.22 11.23 11.23 ascon128abi32v12 13.64 13.71 13.73 T:xoodyakround3 16.88 16.91 16.91 ascon128bi32v12 21.41 21.43 21.52 T:schwaemm256128v2 25.47 25.55 25.56 T:schwaemm256256v2 26.29 26.86 26.90 T:grain128aeadv2 27.30 27.32 27.33 T:isapa128v20 28.60 28.70 28.76 romulusn 28.51 28.70 28.73 T:schwaemm192192v2 29.69 29.71 29.87 T:schwaemm128128v2 30.63 30.71 30.78 T:isapa128av20 39.53 39.74 39.96 romulusm 40.55 40.57 41.00 T:giftcofb128v1 51.18 51.20 51.28 T:tinyjambu128v2 54.72 54.75 54.76 T:tinyjambu192v2 55.39 55.51 55.69 T:isapk128av20 58.47 58.52 58.57 T:tinyjambu256v2 71.49 71.56 71.59 T:isapk128v20 77.23 77.24 77.26 romulust 131.03 131.10 131.46 T:isapxv20 191.17 191.55 191.75 T:elephant200v2 5102.27 5103.01 5105.78 T:elephant176v2 5735.94 5736.90 5742.55 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.15 1.15 1.16 aes256gcmv1 6.57 6.57 6.57 ascon128av12 9.28 9.30 9.32 ascon128v12 9.29 9.30 9.30 ascon80pqv12 11.23 11.23 11.23 ascon128abi32v12 13.68 13.74 13.76 T:xoodyakround3 16.99 16.99 16.99 ascon128bi32v12 18.23 18.24 18.26 T:isapa128v20 21.39 21.40 21.54 T:schwaemm256128v2 24.40 24.42 24.45 T:isapa128av20 25.48 25.51 25.55 T:schwaemm256256v2 26.72 26.88 26.93 T:grain128aeadv2 28.45 28.47 28.62 T:schwaemm192192v2 28.69 28.71 28.90 romulusn 29.67 29.70 29.89 T:schwaemm128128v2 38.87 38.88 38.88 romulust 39.62 39.67 39.94 romulusm 40.54 40.62 40.96 T:giftcofb128v1 44.03 44.13 44.18 T:isapk128av20 51.19 51.22 51.23 T:tinyjambu128v2 54.74 54.75 54.76 T:tinyjambu192v2 54.80 54.89 55.06 T:isapk128v20 58.48 58.53 58.54 T:tinyjambu256v2 97.97 98.27 98.49 T:isapxv20 191.12 191.64 191.89 T:elephant200v2 5101.99 5106.33 5111.94 T:elephant176v2 5736.37 5737.01 5737.43 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.52 0.52 0.54 T:aes128gcmv1 0.53 0.54 0.56 aes256gcmv1 6.42 6.43 6.45 ascon128av12 9.22 9.22 9.23 ascon80pqv12 9.25 9.25 9.26 ascon128v12 9.90 9.95 9.97 T:xoodyakround3 10.81 10.83 10.83 ascon128abi32v12 16.57 16.57 16.57 ascon128bi32v12 18.14 18.25 18.35 T:isapa128v20 21.26 21.45 21.46 T:schwaemm256128v2 21.82 21.84 22.25 romulusn 21.79 22.00 22.05 romulusm 24.63 24.69 24.71 T:isapa128av20 25.41 25.43 25.57 T:schwaemm256256v2 27.08 27.41 27.48 T:grain128aeadv2 28.39 28.42 28.44 T:schwaemm192192v2 29.50 29.54 30.14 T:schwaemm128128v2 38.86 38.87 38.87 romulust 40.12 40.13 40.14 T:tinyjambu192v2 40.19 40.19 40.19 T:tinyjambu256v2 40.13 40.21 40.27 T:tinyjambu128v2 40.33 40.53 40.94 T:giftcofb128v1 44.00 44.04 44.10 T:isapk128av20 54.81 54.96 55.14 T:isapk128v20 97.47 98.41 98.84 T:isapxv20 128.10 128.18 128.37 T:elephant200v2 3372.45 3374.53 3376.12 T:elephant176v2 3821.27 3822.79 3824.34 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.52 0.54 0.54 T:aes128gcmv1 0.53 0.54 0.57 aes256gcmv1 6.35 6.37 6.37 ascon128av12 9.21 9.21 9.26 ascon80pqv12 9.21 9.24 9.26 ascon128v12 9.94 10.00 10.03 T:xoodyakround3 10.47 11.00 11.02 ascon128abi32v12 16.68 16.69 16.69 ascon128bi32v12 18.24 18.27 18.27 T:isapa128v20 21.46 21.46 21.47 T:schwaemm256128v2 21.87 22.02 22.19 romulusm 22.13 22.23 22.25 romulusn 24.37 24.40 24.66 T:isapa128av20 25.42 25.43 25.44 T:schwaemm256256v2 26.45 26.74 27.08 T:grain128aeadv2 28.10 28.41 28.42 T:schwaemm192192v2 29.50 29.53 29.54 T:schwaemm128128v2 38.83 38.87 38.92 romulust 40.14 40.16 40.17 T:tinyjambu192v2 40.20 40.20 40.21 T:tinyjambu256v2 40.17 40.23 40.23 T:tinyjambu128v2 40.36 40.50 40.92 T:giftcofb128v1 44.00 44.09 44.20 T:isapk128av20 54.77 54.88 54.91 T:isapk128v20 97.78 97.97 98.31 T:isapxv20 128.14 128.18 128.41 T:elephant200v2 3372.61 3373.54 3375.35 T:elephant176v2 3821.28 3821.65 3822.48 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.53 0.53 0.54 T:aes128gcmv1 0.55 0.55 0.55 aes256gcmv1 6.43 6.44 6.45 ascon128av12 9.21 9.23 9.25 ascon80pqv12 9.21 9.23 9.26 ascon128v12 9.89 9.96 9.98 T:xoodyakround3 10.99 11.01 11.02 ascon128abi32v12 16.70 16.84 16.86 ascon128bi32v12 18.26 18.28 18.33 T:isapa128v20 21.44 21.44 21.45 T:schwaemm256128v2 21.83 21.84 22.24 romulusn 21.86 22.02 22.29 romulusm 24.34 24.38 24.44 T:isapa128av20 25.42 25.42 25.43 T:schwaemm256256v2 26.53 26.74 26.99 T:grain128aeadv2 28.30 28.41 28.44 T:schwaemm192192v2 29.53 29.55 29.56 T:schwaemm128128v2 38.85 38.87 38.90 romulust 40.14 40.14 40.17 T:tinyjambu192v2 40.21 40.22 40.22 T:tinyjambu128v2 40.22 40.22 40.23 T:tinyjambu256v2 40.35 40.56 40.86 T:giftcofb128v1 43.96 44.06 44.25 T:isapk128av20 53.89 54.92 55.17 T:isapk128v20 97.89 98.06 98.44 T:isapxv20 128.23 128.35 128.37 T:elephant200v2 3372.79 3373.60 3382.86 T:elephant176v2 3821.47 3822.08 3822.92 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.16 1.16 T:aes128gcmv1 1.23 1.24 1.24 aes256gcmv1 6.78 6.78 6.78 ascon128av12 9.47 9.47 9.47 ascon128v12 9.47 9.47 9.47 ascon80pqv12 11.39 11.39 11.40 ascon128abi32v12 13.92 14.01 14.33 T:xoodyakround3 17.21 17.21 17.21 ascon128bi32v12 22.11 22.24 22.24 T:schwaemm256128v2 26.16 26.27 26.34 T:schwaemm256256v2 27.64 27.68 27.75 T:grain128aeadv2 28.84 28.85 28.95 romulusn 29.16 29.20 29.24 T:schwaemm192192v2 30.08 30.11 30.14 T:schwaemm128128v2 34.06 34.11 34.12 T:isapa128av20 39.88 39.91 39.95 T:isapa128v20 39.79 39.95 40.00 romulusm 40.78 41.04 41.41 T:giftcofb128v1 51.59 51.61 51.61 T:tinyjambu128v2 55.20 55.20 55.27 T:tinyjambu192v2 58.88 58.91 58.95 T:tinyjambu256v2 61.91 62.01 62.16 T:isapk128av20 78.43 78.44 78.47 romulust 123.28 123.36 123.49 T:isapk128v20 195.39 195.46 195.85 T:elephant200v2 213.14 213.29 213.52 T:isapxv20 5141.31 5144.50 5145.18 T:elephant176v2 5801.17 5801.40 5801.97 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.23 1.23 1.24 T:aes128gcmv1 1.29 1.30 1.30 aes256gcmv1 6.74 6.74 6.78 ascon128av12 9.46 9.47 9.47 ascon128v12 9.46 9.47 9.47 ascon80pqv12 11.53 11.53 11.53 ascon128abi32v12 13.84 13.87 13.90 T:xoodyakround3 17.23 17.23 17.23 ascon128bi32v12 22.05 22.06 22.27 T:schwaemm256128v2 26.17 26.19 26.23 T:schwaemm256256v2 26.97 27.24 27.44 T:grain128aeadv2 28.94 29.06 29.15 romulusn 29.21 29.32 29.34 T:schwaemm192192v2 30.10 30.11 30.31 T:schwaemm128128v2 33.94 33.97 34.06 T:isapa128av20 39.94 39.94 39.94 T:isapa128v20 40.08 40.18 40.29 romulusm 40.93 41.09 41.33 T:giftcofb128v1 51.58 51.59 51.61 T:tinyjambu128v2 55.14 55.17 55.18 T:tinyjambu192v2 58.92 58.92 58.98 T:tinyjambu256v2 61.88 61.96 62.17 T:isapk128av20 78.42 78.42 78.47 romulust 123.22 123.23 123.29 T:isapk128v20 195.54 195.58 195.93 T:elephant200v2 212.39 212.62 212.88 T:isapxv20 5141.18 5142.10 5144.35 T:elephant176v2 5801.53 5801.97 5803.82 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.23 1.23 1.23 T:aes128gcmv1 1.28 1.29 1.29 aes256gcmv1 6.76 6.76 6.76 ascon128av12 9.45 9.46 9.49 ascon128v12 9.46 9.46 9.46 ascon80pqv12 11.53 11.53 11.53 ascon128abi32v12 13.91 13.93 13.94 T:xoodyakround3 17.23 17.30 17.30 ascon128bi32v12 22.05 22.05 22.06 T:schwaemm256128v2 24.64 24.64 24.64 T:isapa128v20 26.24 26.24 26.35 T:isapa128av20 26.21 26.33 26.43 T:schwaemm256256v2 27.08 27.21 27.25 T:grain128aeadv2 28.87 28.93 28.96 romulusn 29.11 29.21 29.25 T:schwaemm192192v2 30.09 30.13 30.33 T:schwaemm128128v2 40.00 40.01 40.01 romulust 40.08 40.19 40.36 romulusm 40.95 41.07 41.28 T:giftcofb128v1 47.76 47.79 47.79 T:isapk128av20 51.57 51.60 51.63 T:tinyjambu128v2 55.16 55.17 55.17 T:tinyjambu192v2 58.93 58.93 58.94 T:tinyjambu256v2 81.30 81.32 81.35 T:isapk128v20 139.80 139.86 140.06 T:isapxv20 195.55 195.72 195.97 T:elephant200v2 5141.57 5142.91 5150.46 T:elephant176v2 5801.45 5801.73 5801.99 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.86 5.94 6.12 T:aes128gcmv1 6.57 6.63 6.73 aes256gcmv1 10.86 11.20 11.57 ascon128av12 12.80 12.92 13.26 ascon80pqv12 12.70 13.23 13.72 ascon128v12 18.41 18.41 19.05 ascon128abi32v12 20.58 20.68 20.80 T:xoodyakround3 24.12 24.62 24.87 ascon128bi32v12 34.97 35.08 35.16 romulusn 35.65 35.73 36.16 T:grain128aeadv2 36.23 36.36 36.41 T:schwaemm256128v2 40.05 40.11 40.23 T:schwaemm128128v2 41.64 41.68 41.82 T:schwaemm256256v2 47.38 47.52 47.99 T:schwaemm192192v2 48.31 48.63 48.87 romulusm 49.41 49.66 49.87 T:giftcofb128v1 60.35 60.49 60.67 T:tinyjambu128v2 64.76 64.80 64.99 T:tinyjambu192v2 68.78 68.78 68.93 T:tinyjambu256v2 105.71 106.09 106.56 romulust 109.40 109.52 109.96 T:isapa128av20 198.95 199.38 200.12 T:isapk128av20 277.66 278.02 278.63 T:elephant200v2 328.55 328.89 330.42 T:isapa128v20 1296.54 1296.98 1297.88 T:isapk128v20 2062.90 2064.88 2074.77 T:isapxv20 6402.12 6403.52 6431.47 T:elephant176v2 7765.51 7770.05 7772.21 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.91 5.96 6.05 T:aes128gcmv1 6.73 6.78 6.84 aes256gcmv1 11.02 11.34 11.70 ascon128av12 12.71 13.05 13.39 ascon128v12 12.81 13.38 13.59 ascon80pqv12 18.37 18.77 18.99 ascon128abi32v12 20.38 20.45 20.98 T:xoodyakround3 24.44 24.80 25.31 ascon128bi32v12 34.77 34.89 35.02 romulusn 35.28 35.34 35.42 T:grain128aeadv2 36.25 36.31 36.33 T:schwaemm256128v2 40.09 40.34 40.55 T:schwaemm128128v2 41.62 41.65 41.78 T:schwaemm256256v2 47.48 47.74 48.07 T:schwaemm192192v2 49.79 49.94 50.36 T:giftcofb128v1 50.59 50.86 51.14 romulusm 60.97 61.02 61.02 T:tinyjambu128v2 64.70 64.84 64.88 T:tinyjambu192v2 68.89 68.92 68.95 T:tinyjambu256v2 105.51 105.67 105.82 romulust 109.45 109.50 110.04 T:isapa128av20 199.10 199.30 199.62 T:isapk128av20 277.98 278.44 279.61 T:elephant200v2 328.29 328.29 330.64 T:isapa128v20 1296.70 1296.88 1298.05 T:isapk128v20 2060.02 2060.88 2065.09 T:isapxv20 6401.81 6407.60 6427.58 T:elephant176v2 7770.50 7771.27 7773.68 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.87 5.88 5.91 T:aes128gcmv1 6.77 6.80 6.81 aes256gcmv1 10.99 11.01 11.11 ascon128av12 12.73 12.74 13.15 ascon128v12 12.97 13.14 13.27 ascon80pqv12 18.22 18.34 18.59 ascon128abi32v12 20.55 20.64 21.23 T:xoodyakround3 24.34 24.34 24.34 ascon128bi32v12 34.77 34.88 34.88 romulusn 35.25 35.38 35.45 T:grain128aeadv2 36.26 36.44 36.66 T:schwaemm256128v2 40.05 40.09 40.19 T:schwaemm128128v2 41.52 41.61 41.73 T:schwaemm256256v2 47.71 47.75 48.13 T:schwaemm192192v2 49.95 49.96 50.11 T:giftcofb128v1 50.16 50.55 50.66 romulusm 60.92 61.12 61.12 T:tinyjambu128v2 64.63 64.66 64.97 T:tinyjambu192v2 65.83 65.93 66.11 romulust 68.22 68.30 68.63 T:isapa128av20 68.76 68.76 68.98 T:tinyjambu256v2 125.09 125.30 125.34 T:isapk128av20 170.06 170.06 171.58 T:isapa128v20 277.73 277.85 278.58 T:elephant200v2 678.38 678.75 679.73 T:isapk128v20 1079.28 1081.08 1082.57 T:isapxv20 6404.97 6406.41 6408.47 T:elephant176v2 7767.27 7771.30 7774.65 T:elephant160v2